Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Google Chrome heuristic warnings pose threat to our business

news.ycombinator.com

Post reply on HN
Print view View original

31–40 of 85 posts

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#32

Post by mgevans »

I just ran into this with some pages in our product as well. If you run Chrome with '--enable-logging --v=2' the chrome_debug.log will contain messages from the phishing classifier (search for 'phishing_classifier'). I was able to tweak the wording on the page to drop the score below 0.5, but there are other features that may be causing your problem.

You may need to restart the browser between edits, as it seems to cache the classifier results by URL. It also skips classification for hosts with private IPs, I had to jump through some hoops to test.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#34

Post by Filecloud »

grey-area wrote: post #22
Filecloud wrote: post #18

Earlier quoted context omitted.

We are not a SaaS or PaaS business. The software itself is hosted by the end customer in thier infrastructure. The warning appears even in local IP/debug page.

Have you tried deleting things from your page till you work out what causes the warning? Just start with a static copy of you page, and gradually delete elements till you find the culprit. It shouldn't take long to go through through the elements of the page and work it out if this is some sort of heuristic triggered by some element on your page and not based on the domain. Another thing it could be is if you fetch a…

Yeap. we are doing exactly as you said. Hopefully we can find out.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#37

Post by markshepard »

While I think chrome having strong anti fraud protection built in is nice, the fact that there is no way to understand what constitutes "correct behavior" and no clear way to get clarification is appalling.

It is essentially engineering how things should be developed, which still could be tolerable if there are guidelines.

If an average user sees a red page indicating risk to a page, then that site/page is essentially killed.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#38

Post by Filecloud »

vigneshv_psg wrote: post #33
pyvek wrote: post #25

I opened http://dev1.codelathe.com/ui/core/index.html (URL in your screenshot) in Chrome (latest) but I'm not getting any phishing warning.

Same here. I'm in Chrome 28 beta.

The issue is much more complex. It appears in the latest live production version. if any of you are part of Google chrome team we can show you.

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#39

Post by coverband »

Filecloud wrote: post #26
alternize wrote: post #13

i'm not seeing the phishing warning when visiting the url from the screenshot using chrome v29.0.1547.0 dev-m. maybe you caught a malware on your computer. did you try from different machines?

We have checked with one of the latest beta builds. In that build it didn't show the warning. It happens with the live chrome version. The issue is much more complex.

On a Mac with current Chrome (Version 27.0.1453.116) hitting your sample dev URL, I don't get any errors at all...

Re: Ask HN: Google Chrome heuristic warnings pose threat to our business

#40

Post by Terretta »

mgevans wrote: post #32

I just ran into this with some pages in our product as well. If you run Chrome with '--enable-logging --v=2' the chrome_debug.log will contain messages from the phishing classifier (search for 'phishing_classifier'). I was able to tweak the wording on the page to drop the score below 0.5, but there are other features that may be causing your problem. You may need to restart the browser between edits, as it seems to c…

For offering a concrete self-help approach among a sea of speculation, and sharing that text on the page changes classification score -- I hope you get upvoted more.
Post reply on HN